From 84c72583fe0501beb1a2414193f0b2ed2a673763 Mon Sep 17 00:00:00 2001
From: Simon Bruder <simon@sbruder.de>
Date: Sat, 1 May 2021 18:31:05 +0200
Subject: [PATCH] fuuko/drone-runner-exec: Use unstable nix
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

This also adds /etc/static as read-only path to the sandbox, since
otherwise /etc/nix/nix.conf can’t be read.
---
 machines/fuuko/services/drone/runner-exec.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/machines/fuuko/services/drone/runner-exec.nix b/machines/fuuko/services/drone/runner-exec.nix
index cc0e8c3..212e99f 100644
--- a/machines/fuuko/services/drone/runner-exec.nix
+++ b/machines/fuuko/services/drone/runner-exec.nix
@@ -10,7 +10,7 @@ let
     git-lfs
     gnutar
     gzip
-    nix
+    nixUnstable
   ];
 in
 {
@@ -44,6 +44,7 @@ in
         "/etc/passwd:/etc/passwd"
         "/etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts"
         "/etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt"
+        "/etc/static"
         "/nix"
       ];
       ExecStart = "${pkgs.unstable.drone-runner-exec}/bin/drone-runner-exec";